5.9
Moyenne
CVE-2017-1476 IBM Security Access Manager Appliance 7.0.0, 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 could allow a remote…
Description
IBM Security Access Manager Appliance 7.0.0, 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 128610.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Security Access Manager 9.0 | 9.0.0 → 9.0.3.1 | Pas de correctif indiqué |
| Security Access Manager 8.0 | 8.0.0 → 8.0.1.6 | Pas de correctif indiqué |
| Security Access Manager | 7.0.0 | Pas de correctif indiqué |
Autres CVE de Security Access Manager
Les 29 CVE de Security Access Manager →
CVE-2021-20439
IBM Security Access Manager 9.0 and IBM Security Verify Access Docker 10.0.0 stores user credentials in plain clear text…
7.5
Élevée
CVE-2020-4499
IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an unauthorized public Oauth…
7.3
Élevée
CVE-2019-4552
IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 are vulnerable to HTTP response splitting…
6.1
Moyenne
CVE-2020-4699
IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an attacker to obtain sensitive…
5.3
Moyenne